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Qubit 

From Wikipedia, the free encyclopedia 

A qubit is not to be confused with a cubit, which is an ancient measure of length. 

A quantum bit, or qubit (sometimes qbit) ['kju.bifj or [k' bit] is a unit of quantum information. That 
information is described by a state vector in a two-level quantum mechanical system which is formally 
equivalent to a two-dimensional vector space over the complex numbers. 

Benjamin Schumacher discovered a way of interpreting quantum states as information. He came up 
with a way of compressing the information in a state, and storing the information on a smaller number 
of states. This is now known as Schumacher compression. In the acknowledgments of his paper (Phys. 
Rev. A 51, 2738), Schumacher states that the term qubit was invented in jest, during his conversations 
with Bill Wootters. 
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Bit versus qubit 

A bit is the base of computer information. Regardless of its physical representation, it is always read as either a 0 or a 1. An analogy to this is a 
light switch - the down position can represent 0 (normally equated to off) and the up position can represent 1 (normally equated to on). 

A qubit has some similarities to a classical bit, but is overall very different. Like a bit, a qubit can have only two possible values - normally a 0 
or a 1 . The difference is that whereas a bit must be either 0 or 1 , a qubit can be 0, 1, or a superposition of both. 

Representation 

The states a qubit may be measured in are known as basis states (or vectors). As is the tradition with any sort of quantum states, Dirac, or bra- 
ket notation is used to represent them. 

This means that the two computational basis states are conventionally written as j 0} and |j 1 ) (pronounced: Ttet 0' and 'ket 1'). 

Qubit states 

A pure qubit state is a linear superposition of those two states. This means that the qubit can be represented as a linear combination of |0) and 

II): 

\i)= a \Q)+m, 

where a and p 1 are probability amplitudes and can in general both be complex numbers. 
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When we measure this qubit in the standard basis, the probability of outcome [0 ) is j a | 2 and the probability that the outcome is \ 1 ) is ; p : , 2 
Because the absolute squares of the amplitudes equate to probabilities, it follows that a and p must be constrained by the equation 

kf + |3| 2 = i 

simply because this ensures you must measure either one state or the other. 

The state space of a single qubit register can be represented geometrically by the Bloch sphere. This is a two dimensional space which has an 
underlying geometry of the surface of a sphere. This essentially means that the single qubit register space has two local degrees of freedom. 
Represented on such a sphere, a classical bit could only lie on one of the poles. An «-qubit register space has 2" +1 - 2 degrees of freedom. This 
is much larger than 2n, which is what one would expect classically with no entanglement. 

Entanglement 

An important distinguishing feature between a qubit and a classical bit is that multiple qubits can exhibit quantum entanglement. Entanglement 
is a nonlocal property that allows a set of qubits to express higher correlation than is possible in classical systems. Take, for example, two 
entangled qubits in the Bell state 

|* + ) = ^(|00} + |11)). 

(Note that in this state, there are equal probabilities of measuring either 1 00) or 1 11) .) 

Imagine that these two entangled qubits are separated, with one each given to Alice and Bob. Alice makes a measurement of her qubit, 
obtaining - with equal probabilities - either |0) or J 1 ^. Because of the qubits' entanglement, Bob must now get the exact same measurement as 
Alice, i.e. if she measured a (0), Bob must measure the same, as 1 00.) is the only state where Alice's qubit is a |0}- 

Entanglement also allows multiple states (such as are the Bell state mentioned above) to be acted on simultaneously, unlike classical bits that 
can only have one value at a time. Entanglement is a necessary ingredient of any quantum computation that cannot be done efficiently on a 
classical computer. 

The use of entanglement in quantum computing has been referred to as "quantum parallelism", and offers a possible explanation for the power 
of quantum computing: because the state of the computer can be in a quantum superposition of many different classical computational paths, 
these paths can all proceed concurrently. 

Quantum register 

A number of entangled qubits taken together is a qubit register. Quantum computers perform calculations by manipulating qubits within a 
register. 

Variations of the qubit 

Similar to the qubit, a qutrit is a unit of quantum information in a 3 -level quantum system. This is analogous to the unit of classical information 
trit. The term "Qudit" is used to denote a unit of quantum mformation in a rf-level quantum system. 

Physical representation 

Any two-level system can be used as a qubit. Multilevel systems can be used as well, if they possess two states can be effectively decoupled 
from the rest (e.g., ground state and first excited state of a nonlinear oscillator). There are various proposals. Several physical implementations 
which approximate two-level systems to various degrees were successfully realized. Similarly to a classical bit where the state of a transistor in 
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a processor, the magnetization of a surface in a hard disk and the presence of current in a cable can all be used to represent bits in the same 
computer, an eventual quantum computer is likely to use various combinations of qubits in its design. 



This is an incomplete list of physical implementation of qubits: 



Physical support 


Name 


Information 
support 


"0" 


"1" 


Single photon (Fock 
states) 


Polarization encoding 


Polarization of 
light 


Horizontal 


Vertical 




Photon number 


Photon number 


Vacuum 


Single photon state 




Time-bin encoding 


Time of arrival 


Early 


Late 


Coherent state of 
light 


Squeezed light 


Quadrature 


Amplitude-squeezed state 


Phase-squeezed state 


Electrons 


Electronic spin 


Spin 




Down 




Electron number 


Charge 


No electron 


One electron 


Nucleus 


Nuclear spin addressed 
through NMR 


Spin 


~ * 


Down 


Optical lattices 


Atomic spin 


Spin 


Up 


Down 


Josephson junction 


qubit 


Charge 


Uncharged superconducting 
"island (Q=0) 


Charged superconductin" island (Q-2e, 
one extra Cooper pair) 




Superconducting flux 
qubit 


Current 


Clockwise current 


Counterclockwise current 




Superconducting phase 
qubit 


Energy 


Ground state 


First excited state 


Singly- charged 
quantum dot pair 


Electron localization 


Charge 


Electron on left dot 

, 


Electron on right dot 



External links 



■ An update on qubits in the Jan 2005 (http://www.sciam.com/) issue of Scientific American 

■ An update on qubits in the Oct 2005 (http://www.sciam.com/article.cfm?chaiiID=sa006&colID=5&articleID=000D4372-A8A9-1330-- 
A54583414B7F0O00) issue of Scientific American 

■ The organization (http://www.qubit.org/) cofounded by one of the pioneers in quantum computation, David Deutsch 



Quantum computing 

Qubit | Quantum circuit [ Quantum computer | Quantum cryptography | Quantum information | Quantum programming 
| Quantum teleportation | Quantum virtual machine | Timeline of quantum computing 
Nuclear magnetic resonance (NMR) quantum computing 
Liquid-state NMR QC | Solid-state NMR QC 
Photonic computing 

Nonlinear optics | Linear optics QC | Non-linear optics QC | Coherent state based QC 
Trapped ion quantum computer 
NIST-type ion-trap QC | Austria-type ion-trap QC 
Semiconductor-based quantum computing 
Kane QC | Loss-DiVincenzo QC 
Superconducting quantum computing 
Charge qubit | Flux qubit | Hybrid qubits 
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Categories: Units of information | Quantum information 



■ This page was last modified 08:41, 25 February 2007. 

■ All text is available under the terms of the GNU Free Documentation License. (See Copyrights for 
details.) 

Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a US-registered 501(c)(3) 
tax-deductible nonprofit charity. 
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Grover's algorithm 



From Wikipedia, the free encyclopedia 
(Redirected from Grovers algorithm) 

Grover's algorithm is a quantum algorithm for searching an unsorted database with N entries in 0(N 1/2 ) time and using OflogN) storage space 
(see big O notation). It was invented by Lov Grover in 1996. 

Classically, searching an unsorted database requires a linear search, which is O(N) in time. Grover's algorithm, which takes 0(N ,/2 ) time, is the 
fastest possible quantum algorithm for searching an unsorted database. It provides "only" a quadratic speedup, unlike other quantum 
algorithms, which may provide exponential speedup over their classical counteiparts. However, even quadratic speedup is considerable when N 
is large. 

Like many quantum computer algorithms, Grover's algorithm is probabilistic in the sense that it gives the correct answer with high probability. 
The probability of failure can be decreased by repeating the algorithm. (An example of a deterministic quantum algorithm is the Deutsch-Jozsa 
algorithm, which always produces the correct answer with probability one.) 



■ 1 Applications 

■ 2 Setup 

■ 3 Algorithm bn 

■ 4 Extensions 

■ 5 Optimality 

■ 6 References 



Although the purpose of Grover's algorithm is usually described as "searching a database", it may be more accurate to describe it as "inverting 
a function". Roughly speaking, if we have a function y=f(x) that can be evaluated on a quantum computer, this algorithm allows us to calculate 
x when given y. Inverting a function is related to the searching of a database because we could come up with a function that produces a 
particular value of y if x matches a desired entry in a database, and another value of y for other values of x. 

Grover's algorithm can also be used for estimating the mean and median of a set of numbers, and for solving the collision problem. In addition, 
it can be used to solve NP-complete problems by performing exhaustive searches over the set of possible solutions. This would result in a 
considerable speedup over classical solutions, even though it does not provide the "holy grail" of a polynomial-time solution. 

Below, we present the basic form of Grover's algorithm, which searches for a single matching entry. The algorithm can be further optimized if 
there is more than one matching entry and the number of matches is known beforehand. 



Consider an unsorted database with N entries. The algorithm requires an TV-dimensional state space H, which can be supplied by log^ qubits. 

Let us number the database entries by 0, 1, ... (NA). Choose an observable, Q, acting on H, with N distinct eigenvalues whose values are all 
known. Each of the eigenstates of Q encode one of the entries in the database, in a manner that we will describe. Denote the eigenstates (using 
bra-ket notation) as 



Contents 



Applications 



Setup 




and the corresponding eigenvalues by 



{Ah At, " * " > Av-i} 
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We are provided with a unitary operator, U w , which acts as a subroutine that compares database entries according to some search criterion. The 
algorithm does not specify how this subroutine works, but it must be a quantum subroutine that works with superpositions of states. 
Furthermore, it must act specially on one of the eigenstates, \a», which corresponds to the database entry matching the search criterion. To be 
precise, we require U m to have the following effects: 

UJu) = -\w) 

Uu^x) — \x) for all x 7^ a? 

Our goal is to identify this eigenstate |(0>, or equivalently the eigenvalue o>, that U ffi acts specially upon. 

Algorithm breakdown 

The steps of Grover's algorithm are as follows: 

1 . Initialize the system to the state 

2. Perform the following "Grover iteration" r(N) times. The function r(N) is described below. 

1 . Apply the operator t/ ffl 

2. Apply the operator £7, = 2 \s) (s\ — L 

3. Perform the measurement £1. Hie measurement result will be X m with probability approaching 1 for N»l . From X w co may be 
obtained. 

Our initial state is 

i 



Consider the plane spanned by |s> and |co>. Let |co*> be a ket in this plane perpendicular to |co>. Since |co> is one of the basis vectors, the 
overlap is 

In geometric terms, there is an angle (iz/2 - 9) between |co> and |s>, where 9 is given by: 
1 

sm& = — = 



The operator U ro is a reflection at the hyperplane orthogonal to |co>; for vectors in the plane spanned by |s> and |to>, it acts as a reflection at the 

line through |to x >. The operator U„ is a reflection at the line through |s>. Therefore, the state vector remains in the plane spanned by |s> and |co> 
after each application of U s and after each application of U ro , and it is straightforward to check that the operator U S U W of each Grover iteration 
step rotates the state vector by an angle of 29 toward |co>. 

We need to stop when the state vector passes close to |a>>; after this, subsequent iterations rotate the state vector away from [<n>, reducing the 
probability of obtaining the correct answer. The number of times to iterate is given by r. In order to align the state vector exactly with |co>, we 
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need: 

~ ') 'Mr 
4 

However, r must be an integer, so generally we can only set r to be the integer closest to (tu/9 - 2)/4. The angle between |co> and the final state 
vector is O(G), so the probability of obtaining the wrong answer is 0(1 - cos^G) = 0(sin 2 6). 

ForN»l,e^N- 1/2 !S o 



Furthermore, the probability of obtaining the wrong answer bec omes 0(1 /N), which goes to zero for large N. 

Extensions 

If, instead of 1 matching entry, there are k matching entries, the same algorithm works but the number of iterations must be n(N/k) ^ 2 /4 instead 
of 7iN 1/2 /4. There are several ways to handle the case if k is unknown. For example, one could run Grover's algorithm several times, with 

A' 1/2 (N/2) 1 '' 2 (N/4,) 1 '' 2 
*—'*^-t->*— I—'"' 

iterations. For any k, one of iterations will find a matching entry with a sufficiently high probability. The total number of iterations is at most 

, T 1 1 n — — h 1 1 

which is still 0(N !/2 ). 

Optimality 

It is known that Grover's algorithm is optimal. That is, any algorithm that accesses the database only by using the operator must apply U w 
at least as many times as Grover's algorithm (Bennett et al, 1997). This result is important in understanding the limits of quantum computation. 
If the Grover's search problem was solvable with log 0 N applications of U w , that would imply that NP is contained in BQP, by transforming 
problems in NP into Grover-type search problems. The optimality of Grover's algorithm suggests (but does not prove) that NP is not contained 
in BQP. 

The number of iterations for k matching entries, it(N/k) 1/2 /4, is also optimal. 

References 
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From Wikipedia, the free encyclopedia 
(Redirected from Shors algorithm) 

Shor's algorithm is a quantum algorithm for factoring a number N in O((log AO 3 ) time and 0(log AO space, named after Peter Shor. 

The algorithm is significant because it implies that RSA, a popular public-key cryptography method, might be easily broken, given a 
sufficiently large quantum computer. RSA uses a public key N which is the pro duct of two large prime numbers . One way to crack RSA 
encryption is by factoring N, but with classical algorithms, factoring becomes increasingly time-consuming as N grows large; more specifically, 
no classical algorithm is known that can factor in time 0((log JV)*) for any k. By contrast, Shor's algorithm can crack RSA in polynomial time. 

Like many quantum computer algorithms, Shor's algorithm is probabilistic: it gives the correct answer with high probability, and the 
probability of failure can be decreased by repeating the algorithm. However, since a proposed answer (in particular primality) is polynomial 
time verifiable, the algorithm can be modified to work in expected polynomial time with zero error. 

Shor's algorithm was discovered in 1994 by Peter Shor, but the classical part was known before, it is credited to G. L. Miller. Seven years later, 
in 200 1 , it was demonstrated by a group at IBM, which factored 1 5 into 3 and 5 , using a quantum computer with 7 qubits . 
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The problem we are trying to solve is that, given an integer N, we try to find another integeT p between / and N that divides N. 
Shor's algorithm consists of two parts: 

1 . A reduction of the factoring problem to the problem of order- finding, which can be done on a classical computer. 

2. A quantum algorithm to solve the order- finding problem. 

Classical part 

1 . Pick a random number a < N 

2. Compute gcd(a, N). This may be done using the Euclidean algorithm. 

3. If gcd(«, A) * 1, then there is a nontrivial factor of N, so we are done. 

4. Otherwise, use the period-finding subroutine (below) to find r, the period of the following function: 



i.e. the smallest integer r for which /(jc + r) =j{x). 

5. If r is odd, go back to step 1 . 

6. lfa r/2 = -l (mod AO, go back to step 1 . 

7. The factors of N are gzA(f 12 ± 1, N). We are done. 

Quantum part: Period-finding subroutine 
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1 . Start with a pair of input and output qubit registers with log 2 A qubits each, and initialize them to 

where x runs from 0 to TV - 1 . 

2. Construct fix) as a quantum function and apply it to the above state, to obtain 

AT 1 * I>> !/(*)> 

3. Apply the inverse quantum Fourier transform on the input register. The inverse quantum Fourier transform on N points is defined by: 

V 

This leaves us in the following state: 

4. Perform a measurement. We obtain some outcome y in the input register and/(*n) ^ tne output register. Since /is periodic, the 
probability of measuring some pair y and fix Q ) is given by 

2 



5> 



e -2*iayfN = #-2 

Analysis now shows that this probability is higher, the closer >r/W is to an integer. 

5. Turn y/N into an irreducible fraction, and extract the denominator r', which is a candidate for r. 

6. Check if fix) =fix + r'). If so, we are done. 

7. Otherwise, obtain more candidates for r by using values near j/, or multiples of r'. If any candidate works, we are done. 

8. Otherwise, go back to step 1 of the subroutine. 



Explanation of the algorithm 

The algorithm is composed of two parts. The first part of the algorithm turns the factoring problem into the problem of finding the period of a 
function, and may be implemented classically. The second part finds the period using the inverse quantum Fourier transform, and is responsible 
for the quantum speedup. 

I. Obtaining factors from period 



The integers less than N and coprime with N form a finite group under multiplication modulo N, which is typically denoted (ZWZ) X . By the 
end of step 3, we have an integer a in this group. Since the group is finite, a must have a finite order r, the smallest positive integer such that 

a r S 1 mod N. 

Therefore, N | (a r — 1). Suppose we are able to obtain r, and it is even. Then 

a r ~~ i - {u r/2 - l)(a r/2 h 1) se 0 mod N 
^JVKo^-lKa^+l). 



r is the smallest positive integer such that a r = \,soN cannot divide (a r 1 2 - 1). If N also does not divide (a f/2 + l), then /V must have a 
nontrivial common factor with each of(a r!2 ~- 1) and (a '' 1 2 + 1). 

Proof: For simplicity, denote {a r 1 2 - 1) and (a r 1 2 + 1) by u and v respectively. N | uv, so kN = uv for some integer k. Suppose gcd(w, N) = 1 ; 
then mu + n/Y= 1 for some integers m and n (this is a property of the greatest common divisor.) Multiplying both sides by v, we find that mkN + 
hv/Y= v, so N | v. By contradiction, gcd(w, N) * I. By a similar argument, gcd(v, N) * 1. 

This supplies us with a factorization of N. If Wis the product of two primes, this is the only possible factorization. 
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II. Finding the period 

Shor's period-finding algorithm relies heavily on the ability of a quantum computer to be in many states simultaneously. Physicists call this 
behaviour a "superposition" of states. To compute the period of a function/ we evaluate the function at all points simultaneously. 

Quantum physics does not allow us to access all this information directly, though. A measurement will yield only one of all possible values, 
destroying all others. Therefore we have to carefully transform the superposition to another state that will return the correct answer with high 
probability. This is achieved by the inverse quantum Fourier transform. 

Shor thus had to solve three "implementation" problems. All of them had to be implemented "fast", which means that they can be implemented 
with a number of quantum gates that is polynomial in logJV. 

1. Create a superposition of states. This can be done by applying Hadamard gates to all qubits in the input register. Another approach 
would be to use the quantum Fourier transform (see below). 

2. Implement the function/ as a quantum transform. To achieve this, Shor used repeated squaring for his modular exponentiation 
transformation. It is important to note that this step is more difficult to implement than the quantum Fourier transform, in that it requires 
ancillary qubits and substantially more gates to accomplish. 

3. Perform an inverse quantum Fourier transform. By using controlled rotation gates and Hadamard gates Shor designed a circuit for the 
quantum Fourier transform that uses just 0((log/V) 2 ) gates. 

After all these transformations a measurement will yield an approximation to the period r. For simplicity assume that there is &y such that yr/N 
is an integer. Then the probability to measure y is 1. To see that we notice that then 

e -2iubyr!N = j 

for all integers b. Therefore die sum whose square gives us the probability to measure y will be N/r since b takes roughly N/r values and thus 
the probability is 1 / r 2 . There are ry such thatjyr/Nis an integer and also r possibilities for/[x 0 ), so the probabilities sum to 1. 

Note: another way to explain Shor's algorithm is by noting that it is just the quantum phase estimation algorithm in disguise. 

Modifications to Shor's Algorithm 

There have been many modifications to Shor's algorithm. For example, whereas, an order of twenty to thirty runs are required on a quantum 
computer in the case of Shor's original algorithm, and with some of the other modifications, in the case of the modification done by David 
McAnally at the University of Queensland an order of only four to eight runs on the quantum computer is required. 

References 

Preprint of the original paper by Peter Shor: 

■ Polynomial Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer, Peter W. Shor 
(http://www.arxiv.org/abs/quant-pli/9508027) 

A general textbook on quantum computing: 

■ Quantum Computation ami Quantum information, Michael A. Nielsen, Isaac L. Chuang, Cambridge University Press, 2000 
An implementation of Shor's Algorithm that factorizes the number 1 5 : 

■ Efficient Networks for Quantum Factoring, David Beckman, Amalavoyal N. Chari, Srikrishna Devabhaktimi, and John Preskill, Phys. 
Rev. A 54, 1034-1063 (1996). 

■ Experimental realization of Shor's quantum factoring algorithm using nuclear magnetic resonance (http://cryptome.org/shor-nature.htm) 
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■ Implementing Shor's algorithm on Josephson Charge Qubits (http://arxiv.org/PS_cache/quant-pri/pdf/0308/0308171.pdf) 
Juha J. Vartiainen, Antti O. Niskanen, Mikio Nakahara, Martti M. Salomaa 

■ hnplementation of Shor's Algorithm on a Linear Nearest Neighbour Qubit Array (http://arxiv.org/PS_cache/quant- 
ph/pdf/04 02/0402 1 96.pdf) 
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External links 

■ "Explanation for the man in the street" by Scott Aaronsen (http://scottaaronson.com/blog/?p=208), "approved" by Peter Shor 

■ A demonstration of Shor's algorithm in PHP (http://pdivos.mobstop.com/shor/) 
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Let n be an integer variable which tends to 
infinity and let x be a continuous variable 
tending to some limit. Also, let <p (fl) or <p U) be a 
positive function and /(/?) or/(x) any function. 
Then the symbols O (x) (sometimes called "big- 
0") and o (x) (sometimes called "little-o") are 
known as the Landau symbols and defined as 
follows. 

1. / = O ($) means that |/| < A <p for some 
constants and all values of n and x, 
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2. / = o {$) means that f/<p -> 0 



at Wt>ifmn Reumek 



(Hardy and Wright 1979, pp, 7-8). 

Historically speaking, the symbol O (x) first 
appeared in the second volume of Bachmann's 
treatise on number theory (Bachmann 1894), 
and Landau obtained this notation in Bachmann's 
book (Landau 1909, p. 883; Derbyshire 2004, p. 
238). However, the symbol o (x) did indeed 
originate with Landau (1909) in place of the 
earlier notation {x} (Narkiewicz 2000, p. XI). 
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i - Unking Here] 
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